Critical severity · published Mar 3, 2022
CVE-2022-22947
VMware Spring Cloud Gateway Code Injection Vulnerability
In wildKEV
10.0
CVSS
98.3%
EPSS
Yes
On KEV
Description
In spring cloud gateway versions prior to 3.1.1+ and 3.0.7+ , applications are vulnerable to a code injection attack when the Gateway Actuator endpoint is enabled, exposed and unsecured. A remote attacker could make a maliciously crafted request that could allow arbitrary remote execution on the remote host.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Changed
Exploitation
Is it being used?
Exploit prediction (EPSS)98.3% · higher than 100% of CVEs
Exploited in the wildYes
CISA KEVListed May 16, 2022
Federal remediation dueJun 6, 2022
Ransomware campaign useNot known
Affected products
Which versions
SC
Spring Cloud Gateway ·
Spring cloud gateway versions 3.1.x prior to 3.1.1+, 3.0.x prior to 3.0.7+ and all old and unsupported versions · source: vendor, NVD, KEV
CG
Commerce Guided Search · Oracle
11.3.2 · source: NVD
CC
Communications Cloud Native Core Binding Support Function · Oracle
1.11.0; 22.1.3 · source: NVD
CC
Communications Cloud Native Core Console · Oracle
22.2.0 · source: NVD
CC
Communications Cloud Native Core Network Exposure Function · Oracle
22.1.0 · source: NVD
CC
CC
Communications Cloud Native Core Network Repository Function · Oracle
1.15.0; 1.15.1; 22.1.2; 22.2.0 · source: NVD
CC
Communications Cloud Native Core Network Slice Selection Function · Oracle
1.8.0; 22.1.0 · source: NVD
CC
Communications Cloud Native Core Security Edge Protection Proxy · Oracle
22.1.1 · source: NVD
CC
Communications Cloud Native Core Service Communication Proxy · Oracle
1.15.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2022-22947
CVE.org
https://www.cve.org/CVERecord?id=CVE-2022-22947
CISA KEV catalogue
https://www.cisa.gov/known-exploited-vulnerabilities-catalog
tanzu.vmware.com
https://tanzu.vmware.com/security/cve-2022-22947
www.oracle.com
https://www.oracle.com/security-alerts/cpuapr2022.html
packetstormsecurity.com
http://packetstormsecurity.com/files/166219/Spring-Cloud-Gateway-3.1.0-Remote-Code-Execution.html
www.oracle.com
https://www.oracle.com/security-alerts/cpujul2022.html
packetstormsecurity.com
http://packetstormsecurity.com/files/168742/Spring-Cloud-Gateway-3.1.0-Remote-Code-Execution.html